Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-oftJ5Nt5EK6LwyY_qtyHDZPoXU.roa
File: 1-oftJ5Nt5EK6LwyY_qtyHDZPoXU.roa (raw, json)
Hash identifier: 18SzLlsS5NaE0tUMGmyeC27F9mKVJq31QTaa7745eb0=
Subject key identifier: FA:87:ED:27:93:6D:E4:42:BA:2F:0C:98:FE:AB:72:1C:36:4F:A1:75
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AB1BEC29135B9A8ED9DD6B7B3D39FF05
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-oftJ5Nt5EK6LwyY_qtyHDZPoXU.roa
Signing time: Wed 16 Sep 2026 16:45:28 +0000
ROA not before: Wed 16 Sep 2026 16:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 13.143.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:1b:ec:29:13:5b:9a:8e:d9:dd:6b:7b:3d:39:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 16:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa87ed27936de442ba2f0c98feab721c364fa175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:93:bf:42:81:47:c9:a7:72:73:30:c1:08:
ba:01:e1:a2:40:0d:94:24:aa:e7:e9:ae:be:09:a2:
b7:de:6e:35:b9:94:fc:41:c4:65:cd:33:8f:46:83:
3e:5e:8a:fb:ea:5d:e6:3e:af:37:ee:f4:e5:b0:e4:
6d:df:1f:7c:9e:ce:2c:f4:52:66:3b:09:74:89:4d:
c8:f0:6c:19:66:fe:19:f5:48:69:2d:e1:f0:34:20:
7d:07:7b:66:f2:40:e2:63:5b:b4:20:6d:fc:98:86:
77:c5:1c:c6:44:93:7c:94:ff:00:0c:ea:ea:07:83:
6d:ad:f4:6b:e9:e9:cc:02:ff:12:0b:34:bd:cb:7e:
d2:89:43:d1:fe:63:bc:08:76:e1:7e:06:0d:07:56:
aa:4b:30:85:47:78:4f:67:33:9d:e6:57:25:55:38:
c4:6d:e3:da:f0:e8:32:49:f6:d1:7a:dd:7c:86:0d:
ec:9f:9f:ef:72:ba:25:8b:91:bf:62:41:1d:e7:89:
88:25:87:f7:4c:f7:90:24:ad:cc:9d:3b:58:be:09:
db:fa:c6:0d:4d:bc:07:e6:13:93:86:e7:a1:b1:94:
7f:bd:f3:e5:73:7a:66:1d:7a:a4:40:b1:00:97:31:
bb:50:e9:5c:cb:01:bf:4c:65:d6:c6:3e:3d:14:4e:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:ED:27:93:6D:E4:42:BA:2F:0C:98:FE:AB:72:1C:36:4F:A1:75
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-oftJ5Nt5EK6LwyY_qtyHDZPoXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.247.0/24
Signature Algorithm: sha256WithRSAEncryption
96:82:46:14:c6:c3:50:a5:7e:15:8d:5e:59:d6:07:ae:89:85:
b8:18:cf:73:23:c0:7f:dc:70:bd:30:97:77:ee:e5:15:24:9e:
49:9a:86:c7:4c:91:38:d1:f5:44:04:35:8f:31:72:af:3d:53:
80:2f:f4:4e:a2:76:7d:d9:7a:67:11:26:a0:46:85:c2:6e:b9:
9d:39:a1:fd:83:c9:03:5a:8f:57:38:2b:56:1f:a9:92:1b:61:
c2:be:aa:5e:bb:8c:c1:d5:60:f4:6c:04:6d:bd:18:3c:8f:d6:
a8:d6:1f:08:59:82:a1:22:d3:18:01:9a:b1:1d:61:f0:24:1b:
d3:7e:d0:f5:cf:1a:d9:1f:6b:d0:4f:00:f2:34:37:59:2c:92:
99:b0:aa:2f:96:c6:b4:71:23:38:86:ff:f3:f5:af:21:47:40:
e3:11:0d:c1:b8:cf:55:f4:68:d7:c0:b7:eb:70:50:9f:ea:07:
ba:e9:51:a6:fc:30:01:8e:4b:62:83:61:3b:3b:b7:5c:a9:32:
31:6c:3f:20:40:42:db:39:e0:1f:20:a5:82:f9:2f:33:9e:f3:
38:ae:a6:b3:cb:67:1a:a0:e1:fd:2d:38:76:92:5a:97:8e:ad:
fa:a4:78:56:19:80:e3:bb:d7:ec:c1:cf:f0:41:c4:52:dd:b1:
c3:19:37:16
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaCrG+wpE1uajtnda3s9Of8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTE2MTY0NTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTg3ZWQyNzkzNmRlNDQyYmEyZjBjOThmZWFiNzIxYzM2NGZhMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsmTv0KBR8mncnMwwQi6AeGiQA2U
JKrn6a6+CaK33m41uZT8QcRlzTOPRoM+Xor76l3mPq837vTlsORt3x98ns4s9FJm
Owl0iU3I8GwZZv4Z9UhpLeHwNCB9B3tm8kDiY1u0IG38mIZ3xRzGRJN8lP8ADOrq
B4NtrfRr6enMAv8SCzS9y37SiUPR/mO8CHbhfgYNB1aqSzCFR3hPZzOd5lclVTjE
bePa8OgySfbRet18hg3sn5/vcroli5G/YkEd54mIJYf3TPeQJK3MnTtYvgnb+sYN
TbwH5hOThuehsZR/vfPlc3pmHXqkQLEAlzG7UOlcywG/TGXWxj49FE4pUQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqH7SeTbeRCui8MmP6rchw2T6F1MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMS1vZnRKNU50NUVLNkx3eVlfcXR5SERaUG9YVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvMzhmMTI4LWVhODItNDU1NS1iNTE0LTE0Mzk2N2E4ZmUw
OC8xL0hKWS1QU0tFZlVac0ppd2doNHduZ05pRUFBTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA2P9zAN
BgkqhkiG9w0BAQsFAAOCAQEAloJGFMbDUKV+FY1eWdYHromFuBjPcyPAf9xwvTCX
d+7lFSSeSZqGx0yRONH1RAQ1jzFyrz1TgC/0TqJ2fdl6ZxEmoEaFwm65nTmh/YPJ
A1qPVzgrVh+pkhthwr6qXruMwdVg9GwEbb0YPI/WqNYfCFmCoSLTGAGasR1h8CQb
037Q9c8a2R9r0E8A8jQ3WSySmbCqL5bGtHEjOIb/8/WvIUdA4xENwbjPVfRo18C3
63BQn+oHuulRpvwwAY5LYoNhOzu3XKkyMWw/IEBC2zngHyClgvkvM57zOK6ms8tn
GqDh/S04dpJal46t+qR4VhmA47vX7MHP8EHEUt2xwxk3Fg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:44 2026 by rpki-client